text:
|Publication number
|Publication type
|Application number
|Publication date
|Feb 13, 1996
|Filing date
|Dec 30, 1993
|Priority date
|Dec 30, 1993
|Fee status
|Also published as
|Publication number
|Phillip W. Rogaway
|Original Assignee
|International Business Machines Corporation
|Export Citation
|BiBTeX, EndNote, RefMan
|Patent Citations (13), Non-Patent Citations (12), Referenced by (49), Classifications (11), Legal Events (5)
|External Links: USPTO, USPTO Assignment, Espacenet
1. Technical Field
The present invention relates in general to techniques for securing the flow of information from an adversary, and in particular to techniques for verifying the identity of a communication partner and distributing session keys among communication partners.
2. Description of the Related Art
With the increased utilization of distributed data processing systems to share and communicate sensitive and confidential information, the computing and relating industries are paying significantly increased attention to improving and refining known techniques for securing data which is communicated over insecure communication channels such as telephone lines and electromagnetic-based communication systems such as cellular networks.
Three long standing industry goals exist. First, it is important that the particular communication partners in a distributed data processing system be able to authenticate the identity of other communication partners within the distributed data processing system. Commonly, this entity authentication requirement is met by depositing a long-lived and shared secret key at two or more communication nodes in the data processing system. For example, a user may possess a secret password which is also known by a host computer within the data processing system. When authentication is desired, a protocol is executed which, based on this shared secret, serves to authenticate one party to the other, or each party to the other. For example, the long-lived and shared secret key can be utilized in a conventional encryption operation such as a DES encryption. Most commonly, the communication partner desiring authentication of another partner directs a "challenge" to the other partner which is in the form of a random bit stream. The partner for which authentication is sought typically performs an encryption operation upon the challenge bit stream utilizing the long-lived and shared secret key, and then passes this data back to the challenging party. This data is decrypted to determine whether the responding party has possession or knowledge of the long-lived and shared secret key, or the challenger utilizes an encryption engine to generate the response he or she is seeking, and then compress the response to the correct answer. This operation may be performed unilaterally or bilaterally. In a unilateral operation, one party obtains authentication of the identity of another party within the distributed data processing system. In a bilateral entity authentication procedure, both parties typically issue a "challenge" to the other party, which must be responded to properly before communication can be allowed between the communication nodes.
The second broad goal of the industry is to provide techniques for generating and distributing short-lived and secret session keys which are shared by two or more communication partners in a distributed data processing system after authentication of the various communication partners has been obtained. In accordance with the present invention, the distribution of the short-lived and secret session key is tightly coupled with the entity authentication operations. The utilization of a session key ensures that the long-lived and shared secret key need not be used more often than is absolutely necessary, and it is further useful to guard against "replay attacks" across the communication sessions which communicating partners may engage in. Typically, the long-lived and shared secret key is utilized only during entity authentication operations. Immediately after authentication of the communicating parties is obtained, the short-lived and secret session key is distributed and utilized to allow communication back and forth between the parties in that particular session, to be authenticated, encrypted, or both.
The third broad industry goal is that of assuring a communicating party which has received data over an insecure line that the data has not been modified in transit. Often, such message authentication is achieved by having the originating party compute a short "authentication tag" as a function of the message being transmitted and the secret key shared by the communicating partners. This authentication tag is typically appended to the data stream which is being communicated between the parties. Upon receipt of the data stream and authentication tag, the receiving party analyzes the authentication tag by performing the same operations which were performed upon the data set by the sending party to generate its own authentication tag. If the sender's authentication tag matches identically the receiver's authenticated tag, then the recipient of the data can be assured that the data has not been altered in any way. This type of protection prevents an active adversary from entering the insecure communication channel and meddling with the data.
In devising security systems for allowing secure communication between communication partners, it is generally assumed that an adversary may be (1) passive and perform eavesdropping operations to monitor and record all communications between the parties in the distributed data processing system, or (2) active and actually participate in communications within the distributed data processing system by requesting access to data or resources and issuing or responding to authentication challenges. The capabilities of an active adversary are taken to include all those of a passive one. One type of adversarial attack which is contemplated is that of an initial passive period of monitoring and recording activities, followed by a period of off-line analysis and manipulation of the data obtained during monitoring activities, followed by a brief interval of activity wherein access to data and data processing resources is requested. Alternatively, the adversary may merely engage in passive monitoring and recording activities followed by analysis and attempts to crypt analyze portions of the data, particularly in an attempt to recover the session key, which is then utilized to decrypt any encrypted data which was transmitted between the parties and recorded by the adversary.
Since it is more difficult to detect a passive adversary, who only monitors, records, and then later performs off-line analysis, than an active adversary who is forced to interact with one or more authorized communication parties, adversaries favor a passive mode of attack. A still more significant reason off-line analysis is preferred by an adversary is the bandwidth limitations present in the communication channel: the adversary can only speak to partners at the rate which is defined and allowed by the system architecture; but off-line analysis can be performed at the rate of the adversary's computing resources. Thus, it is especially important to provide data security systems which prevent an adversary from gathering useful data during passive activities. It is especially important that security systems be designed to prevent a compromise of the long-lived and secret shared key as well as any short-lived and secret session keys which may have been utilized. It is especially important that the security system prevent the passive adversary from correctly guessing the long-lived or short-lived keys during off-line analysis, and then confirming the veracity of the guess during off-line activities. It is important that the adversary be forced to actively engage one or more communication parties in order to confirm the accuracy of a correctly guessed key. This type of protection is identified as "security against off-line attack", and can be best understood with respect to the specific example of one type of off-line attack, which is known as a "dictionary attack", which will be discussed here below.
Dictionary attacks are effective because the long-lived key used for the entity authentication is based on a user's password and these passwords are often chosen poorly. Many data processing systems allow the human operators to select their own passwords. Of course, the humans select familiar words typically, in order to be better able to remember the pass word in the future. It is not uncommon for users to use proper names or common nouns or verbs as passwords. Since human language is a fairly small and static set, it is possible for a passive adversary to iteratively guess the candidate of one or more particular languages and then see if such guess "explains" the transcript recorded in an earlier session during eavesdropping activity. When a match is identified, the correct password is typically recovered as is any short-lived key whose distribution had been based on this password. Of course, this type of off-line attack can be computationally demanding if the size of the dictionary is very large, but the significant advances which are continually being made in processing speed and power make such off-line attacks practical even if the dictionary contains many millions of words.
It is one objective of the present invention to provide a security system which is not susceptible to off-line attacks, such as a dictionary attack, by forcing an adversary to test the accuracy of each guess of a candidate key interactively with one or more communication parties.
It is another objective of the present invention to provide a security system which minimizes the number of communication flows which must pass between communicating parties during entity authentication operations and key distributions.
It is yet another objective of the present invention to provide a security system which is less reliant on encryption and decryption operations than existing prior art security systems, and which is much more reliant upon transforms, such as message authentication codes and encryption hash functions, which are applied to a plurality of parameters including the long-lived and secret shared key, or its derivatives, in order to maximize system security.
It is still another objective of the present invention to provide a security system which utilizes one or more computationally irreversible transforms which are applied to a plurality of parameters, including the long-lived and secret shared key or its derivatives, to accomplish entity authentication, in lieu of the more conventional utilization of encryption techniques such as the DES algorithm. In the preferred embodiment, this type of authentication-tag-based entity authentication is utilized in combination with an exponential key exchange. The present technique can be utilized to perform unilateral or multilateral authentication, involving two parties or three parties.
These and other objectives are achieved as is now described. A method is provided for authenticating a communication partner on an insecure communication channel, wherein the authenticity of a communication partner is determined by possession of a long-lived shared secret key. The method includes a number of steps. First, a "composite key" is exchanged in data flows between communication partners, wherein at least a portion of the data flows has been encrypted or otherwise masked in a manner which utilizes the long-lived shared secret key. Next, at least one authentication tag is passed between communication partners, with the at least one authentication tag being based at least partially upon the composite key. Finally, the authentication tag is utilized by at least one communication partner to determine authenticity of another communication partner. In the preferred embodiment of the present invention, the at least one authentication tag is defined by a transform which includes at least one of (1) a message authentication code which is keyed by said long-lived shared secret key and taken over a plurality of parameters, (2) a cryptographic hash function taken over the long-lived shared secret key and a plurality of other parameters, and (3) the encryption or message authentication code keyed by said long-lived key and taken over the cryptographic hash of a plurality of parameters. In one particular embodiment of the present invention, wherein mutual authentication is desired between first and second parties, the parties first exchange portions of a composite key using a conventional secret key exchange, except that some or all of the flows of this exchange are encrypted, as is described in U.S. Pat. No. 4,241,599 to Bellovin et al. Then, first and second authentication tags are exchanged between the first and second communication parties. The authentication tags are analyzed to perform an entity authentication of the first and second communication partners. In one specific embodiment of the present invention, at least one of the first and second authentication tags is communicated between the first and second communication partners along with at least a portion of the composite session key, in order to minimize the number of communication flows between the first and second communication partners. In particular embodiments of the present invention, the authentication tags are generated by applying a hash function to a plurality of parameters, which include the newly-distributed session key, and then using as the authentication tag a prefix of this hash function.
While the present invention is described with reference to one principal commercial application in distributed data processing systems, it is clear that the present invention is of general applicability and can be utilized to communicate messages in any conceivable communication channel, and that it is particularly useful for secret telecommunications.
The above as well as additional objectives, features, and advantages of the present invention will become apparent in the following detailed written description.
The novel features believed characteristic of the invention are set forth in the appended claims. The invention itself however, as well as a preferred mode of use, further objectives and advantages thereof, will best be understood by reference to the following detailed description of an illustrative embodiment when read in conjunction with the accompanying drawings, wherein:
FIG. 1 depicts a prior art two-party, message authentication;
FIG. 2 depicts a prior art conventional key exchange, exponential key exchange, such as the Diffie-Hellman key exchange;
FIG. 3 depicts a prior art key exchange in accordance with the teachings of Bellovin and Merritt;
FIG. 4 depicts a two-party, mutual authentication operation in accordance with one embodiment of the present invention; and
FIG. 5 depicts a distributed data processing system which can be programmed to perform the authentication operation of the present invention.
FIGS. 1, 2, and 3 provide views of prior art techniques for securing the communication of data. An understanding of these prior art techniques will facilitate an understanding of the preferred embodiments of the present invention which are depicted in FIGS. 4 and 5.
In FIG. 1, a prior art, three-pass message authentication technique is depicted. As is shown, A and B are the communication partners, which share a long-lived and shared secret key a. Communication partners A and B communicate over an insecure communication channel. Three data flows are depicted in FIG. 1. The first data flow is from communication partner A to communication partner B, and includes a random bit string Ra which represents an entity authentication challenge. The first flow also includes an arbitrary text string Text1. Communication partner B responds to the first communication flow by directing to communication partner A a random bit string challenge RB an arbitrary text string Text2, and a bit string which is the result of a transform h1, which is keyed with the long-lived and shared secret key a, and taken over a plurality of further data items including an identification of communication partners A, B, the authentication challenges RA, RB, which have been generated by the communication partners A, B, and Text2.
Since communication partner A possesses the long-lived and shared secret key a, then she can utilize the authentication challenge RB from communication partner B to generate a bit stream which is identical (if the second flow is computed correctly and received as it is transmitted) to that provided by communication partner B as a result of utilization of transform ha 1. At the end of communication flow 2, communication partner A can be certain that communication partner B is "authentic", since possession of the long-lived and shared secret key is required for communication partner B to generate a bit stream through the utilization of transform ha 1 which is identical to that generated by communication partner A.
In the third communication flow, communication partner A directs Text3, and the result of the application of transform ha 2 to the authentication challenge RB and Text3. Communication partner B can utilize the long-lived and shared secret key a, the authentication challenge RB, Text3, and transform h2 to generate a bit stream which is compared to that provided by communication partner A. If the bit streams are identical, then communication partner B can be certain that communication partner A is "authentic". The techniques depicted in FIG. 1 are more fully discussed in a publication by M. Bellare and P. Rogaway, entitled "Entity Authentication and Key Distribution", published in The Proceeding of Crypto '93, by Springer-Verlag, which is incorporated here fully as is set forth herein. Basically, in the technique of FIG. 1, conventional entity authentication challenging techniques are combined with conventional message authentication techniques.
FIG. 2 depicts a conventional key exchange in accordance with the teachings of W. Diffie, and M. Hellman, in an article entitled "New Directions in Cryptography", IEEE Transactions On Information Theory, IT-22, No. 6, 1976, which is incorporated herein as if fully set forth. This technique may be identified specifically as a Diffie-Hellman key exchange. The purpose of this technique is to publicly exchange information that can be combined to generate a shared secret key which can be utilized for particular communication sessions. In accordance with this protocol, communication partner A directs to communication partner B a bit stream which is generated by expotentiating a publicly-known base g to a secretly selected power or, selected from a publicly-known group such as the multiplicative group Modulo a fixed prime number p. Communication partner El responds in communication flow 2 by directing to communication partner A a bit stream which is generated by expotentiating a publicly-known base g to a secretly selected power β, selected from the same publicly-known group from which α was selected. The shared secret σ, is generated by utilization of the information passed between communication partners A, B in the two communication flows. As is shown in FIG. 2, the shared secret σ, is a function of a transform H as applied to the exponential product of g.sup.α and g.sup.β. Preferably, the values for α, and β are randomly selected by communication partners A, B from a predefined set of integers.
The Diffie-Hellman key exchange is useful only over communication channels which may be subject to passive adversaries, but not communication channels which are subject to active adversaries. In other words, if the communication channel is susceptible to interaction by the adversary, then the Diffie-Hellman key exchange protocol is not very useful, since the adversary can pose as either communication partner A or communication partner B and initiate the generation of a shared secret, which can then be utilized to obtain information from an authorized party.
Conventional key exchange techniques like that of the Diffie-Hellman key exchange protocol of FIG. 2 have been elaborated on by Bellovin and Merritt in the paper entitled "Encrypted Key Exchange: Password Based Protocol Secure Against Dictionary Attacks", proceedings of the IEEE Symposium On Research And Security And Privacy, 1992, which is also the subject matter of U.S. Pat. No. 5,241,599, issued on Aug. 31, 1993 to Bellovin et al., and which is entitled "Cryptographic Protocol For Secure Communications", both of which are incorporated herein by reference fully. The broad concept behind the approach of Bellovin and Merritt is depicted in FIG. 3. As is shown, communication partners A, B share a long-lived secret key a. Two communication flows are depicted in FIG. 3, although additional communication flows are also possible. In the first communication flow, A applies a randomly-selected and secret a (an authentication key picked from a fixed underlying group), as an exponent to the publicly-known base g, and then applies an encryption of masking transform Ea 1 which is keyed with the long-lived and shared secret key a to the bit stream representative of g.sup.σ. In the second communication flow, communication partner B responds by applying a randomly-selected β as an exponent to the base g, and then applies a transform Ea 2 to the bit stream which is generated by g.sup.β. In accordance with this technique, the key which has been generated as a result of this interaction is σ which is equal to H1 (g.sup.αβ), for some function H1. In this protocol the transforms E1 and E2 can be exclusive-or operations or any other masking operation. Utilizing this technique Bellovin and Merritt have devised a protocol which can be utilized to periodically generate short-lived session keys, in accordance with the Diffie-Hellman key exchange, which are secure against both active and passive adversaries. The information contained in communication flows 1 and 2 is not susceptible to eavesdropping, since the exchanged data is encrypted with a transform which is keyed by the long-lived and shared secret key a, and is thus not susceptible to passive off-line attacks such as a dictionary attack.
One embodiment of the present invention will be described now with reference to FIG. 4. The present invention presents a security protocol which can be utilized to simultaneously obtain the following results:
(1) to allow for entity authentication between two or more parties in a communication system;
(2) to employ tags, in lieu of encryption, to achieve the entity authentication for messages communicated between the parties in a communication system;
(3) to allow the two or more parties in the communication system to distribute a short-lived session key; and
(4) wherein the objectives of entity authentication and session key distribution are accomplished in a minimal number of communication flows between the multiple parties in the communication system, and which in particular is accomplished by a substantially simultaneous pursuit of the goals of entity authentication, and key distribution in each particular data flow; and
(5) wherein the communication system is secure from off-line attacks, and in particular is secure against dictionary attacks; and
(6) wherein the security system provides perfect forward secrecy, preventing an adversary from utilizing knowledge of the long-lived key to compromise the secrecy of recorded sessions.
As is shown in FIG. 4, this preferred embodiment requires three consecutive data flows between communication parties A, B, which share a long-lived secret a; however, in alternative embodiments, the objectives of the present invention could be achieved in a greater number of data flows, such as, for example four or five data flows, by separating particular portions of the data flows for separate communication.
In the scenario of FIG. 4, communication partner A is trying to pass Text1 to communication partner B. Communication B will respond by directing Text2 to communication partner A. Then communication partner A will reply to communication partner B by directing Text3 to communication B. During this exchange of data, communication partners A, B want to make certain that each communication is being generated by an "authentic" source, and that the textual message or data has not been altered in any way by an adversary. They also want to distribute a fresh session key, to be used for subsequent message authentication and/or encryption. To accomplish these goals, in the first communication flow, communication partner A directs Text1 and an encrypted or otherwise masked bit stream to communication partner B. More specifically, communication partner A selects a, in accordance with the Diffie-Hellman key exchange which is depicted in FIG. 2, and described above. σ is selected at random between 0 and p-2 from the multiplicative group of integers modulo p. The randomly-selected 7 is applied as an exponent to a publicly known base g, and the numeric value of g.sup.σ is subject to transform E1, which is keyed with the long-lived and shared secret key a' which can comprise an exclusive-or operation performed utilizing gσ and the long-lived and shared key a. In the communication flow this operation is represented as Ea 1. Therefore, the first flow of a conventional secret key exchange is masked in accordance with the transform Ea 1.
In the second communication flow, communication partner B directs to communication partner A a textual portion Text2, and two other components. The first component is a second flow of a conventional key exchange, such as the Diffie-Hellman key exchange model. More specifically, communication partner B randomly selects β from the set of integers from which σ was selected. The randomly-selected σ is applied as an exponent to the publicly-known base g. The numeric value of g.sup.β may be subjected to transform E2 which is keyed by the long-lived and shared secret key a and which is thus represented in communication flow 2 as Ea 2. The second component is the result of applying masking transform h1, which is keyed with the long-lived and shared secret key a, and which is applied to a plurality of parameters including an identification of communication party B, an identification of communication party A, the textual portion Text1 which was transmitted in the first data flow, the textual portion Text2 which was transmitted in the second data flow, and the masked exchange of key portions defined by Ea 1 (g.sup.α ), and Ea 2 (g.sup.β). Additionally, σ, is also the subject of the transform of ha 1 ; σ is defined, in accordance with the Diffie-Hellman protocol of FIG. 2, as g.sup.αβ mod p.
In this manner, in the first two communication flows, communication partners A, B, exchange two textual portions, as well as two flows which together define the short-lived (session) key which is defined as σ; however, the key flows are masked to render them useless to an adversary who does not have access to the long-lived and shared secret key a. In the second communication flow, the bit stream generated by transform ha 1 serves a dual function: to perform a message authentication procedure on the data of Text1 and Text2, and to authenticate communication partner B to communication partner A (by having the encryption transform h1 be applied to a group of parameters which includes σ or a).
In the third communication flow, textual portion Text3 is communicated by communication partner A to communication partner B. Additionally, masking transform h2 is keyed with the long-lived and shared secret key a, and is applied to at least three parameters, including the transformed composite key portion g.sup.β, which is subjected to the transform in accordance with Ea 2, the textual portion Text3, and σ which represents the session key. As a result of this third communication flow, communication partner A has authenticated herself to communication partner B by including σ in the parameters which are subjected to the encryption transform ha 2. Simultaneously, the data contained in Text3 is assured to be accurate, since transform ha 2 operates as a message authentication transform.
In the preferred embodiment of the present invention, a plurality transform function of the transforms E1, E2, h1, and h2. For example, the of conventional transforms may be utilized to perform the encryption or masking encryption or masking transform of Ea 1 could be the exclusive-oring of the long-lived and secret shared key a against g.sup.σ. The exclusive-oring of the long-lived and shared secret key a against the bit stream of g.sup.β could be utilized as the masking transform E2.
In accordance with the present invention, the encryption or masking transforms h1 and h2 are preferably either (1) a message authentication code operation, which is keyed by the long-lived and shared secret key a applied to a plurality of parameters including σ or a composite key portion, or (2) a cryptographic hash function which is keyed with the long-lived and shared secret key a and applied to a plurality of parameters including the composite session key σ, or a portion of the composite session key, or (3) the encryption or message authentication code keyed by the long-lived key a and taken over the cryptographic hash of a plurality of parameters.
In the preferred embodiment of the present invention, transforms ha 1 and ha 2 are either conventional message authentication code techniques or conventional hash functions. Many mechanisms are available to accomplish the objectives of message authentication code operations, but some of the principal ones include:
(1) the prefix of the last word of the CBC-encryption using a block cipher α (that is, cipher block chaining) of a particular bit stream under a long-lived and secret key a, denoted as "CBCa C(x)";
(2) the prefix of the cryptographic hash of a particular bit stream and the long-lived and shared secret key a, denoted as "hash (x, a)";
(3) a combination of the operation of No. 1 and the operation of No. 2 to drive the prefix of a cipher block chaining operation which is performed upon a cryptographic hash function of operation No. 2, which is denoted "CBCa (hash(x,a)); and
(4) a combination of a hash operation and an encryption operation (such as the DES algorithm) which can be denoted as "Encryption (hash(x))".
Message authentication codes (MACs) are utilized in cryptography to assure the authenticity of communications. These types of operations are frequently referred to as "message authentication operations". Typically, message authentication operations permit a receiver to validate a message's origin and destination, contents, timeliness, and sequence relative to other messages flowing between communicants.
While a variety of algorithms may serve to perform the method authentication code (MAC) operations, the best known and official scheme is 8 documented in the DES MODES OF OPERATION publication, more specifically identified as the Federal Information Processing Standards Publication, FIPS PUB 81, published by the National Bureau of Standards on Dec. 2, 1980. Preferably, the Cipher Block Chaining (CBC) mode is used to encrypt plaintext, which must be padded (for example, with zero bits) if necessary to make it a multiple of sixty-four bits in length. The MAC consists of the last k bits of cyphertext, the rest of which is discarded. This process is discussed in an article by C. H. Meyer and S. M. Matyas, entitled "Cryptography: A New Dimension in Computer Data Security", published by John Wiley & Sons, of New York, in 1982. The utilization of the DES algorithm in the Cipher Block Chaining mode of operation demonstrates a well-established forward error propagating property; therefore, the change of even so much as a single bit in the plaintext would cause an unpredictable change in every bit in the MAC with the probability of fifty percent for each bit. Utilizing a MAC which is k-bits long, and the MAC is transmitted along with the associated message to be authenticated, and that portion is recomputed on the received message at the destination, then there is only a probability of 2-k that the received MAC matches the recomputed MAC in the event that the transmitted message has been tampered with. This probability can be made as small as desired by choosing k sufficiently large.
In the preferred embodiment of the present invention, the Cipher Block Chaining operation is utilized to generate the message authentication code (MAC). The DES operation which is utilized in the Cipher Block Chaining is keyed with a particular secret key. In the embodiment discussed herein the keying of the message authentication code (MAC) operation with a secret key ensures that the authentication tag produced as a result of the message authentication code operation serves to authenticate the one or more communication parties.
An article published in the September 1985 issue of IEEE Communications Magazine, Volume 23, No. 9, entitled "Message Authentication" by R. R. Jueneman, S. M. Matyas, and C. H. Meyer sets forth alternatives to the Cipher Block Chaining operation, and is incorporated herein fully as if set forth.
The protocols of the present invention may be utilized in a distributed data processing system to authenticate one or more communication partners in the distributed data processing system. In such an environment, 18 one or more data processing units perform the functions of the trusted intermediary. FIG. 5 depicts a distributed data processing system 8 which may be programmed to perform the protocols described herein.
As is shown in FIG. 5, distributed data processing system 8 may include a plurality of networks, such as local area networks (LAN) 10 and 32, each of which preferably includes a plurality of individual computers 12, 30, respectively. Of course, those skilled in the art will appreciate that a plurality of intelligent work stations coupled to a host computer may be utilized for each such network. As is common in such distributed data processing systems, each individual computer may be coupled to a storage device 14 and/or a printer/output device 16. One or more such storage devices 14 may be utilized, in accordance with the method and system of the present invention, to store various "groupware" applications or documents which may be simultaneously or successively accessed and processed by multiple users. Furthermore, one or more systems may be included for managing data processing resources, including the groupware applications and documents, in accordance with conventional technologies.
Still referring to FIG. 5, it may be seen that distributed data processing network 8 may also include multiple mainframe computers, such as mainframe computer 18, which may be preferably coupled to local area network (LAN) 10 by means of communications link 22. Mainframe computer 18 may be coupled to a storage device 20 which may serve as remote storage for local area network (LAN) 10 and may be coupled via communications controller 26 and communications link 34 to a gateway server 28. Gateway server 28 is preferably an individual computer or intelligent work station (IWS) which serves to link local area network (LAN) 32 to local area network (LAN) 10.
As discussed above with respect to local area network (LAN) 32 and local area network (LAN) 10, a plurality of data objects, application programs, and data files, groupware programs, or groupware documents may be stored within storage device 20 and controlled by mainframe computer 18, as resource manager or library service for the data objects and documents thus stored. Those skilled in the art will appreciate that it is often desirable to permit simultaneous or successive, as well as restricted, access to such data objects, application programs, data files, groupware applications, or groupware documents to allow for the beneficial synergistic effects of group work. Additionally, those skilled in the art will appreciate that mainframe computer 18 may be located a great geographical distance from local area network (LAN) 10; and, similarly, local area network (LAN) 10 may be located a substantial distance from local area network (LAN) 32. That is, local area network (LAN) 32 may be located in California, while local area network (LAN) 10 may be located in Texas, and mainframe computer 18 may be located in New York.
While the present invention provides a secure and efficient means for authenticating communication partners and simultaneously distributing short-lived session keys to the communication partners, it also includes several significant advantages. The present invention provides "perfect forward secrecy". This means that, if an adversary comes into possession of the long-lived secret key, then short-lived session keys which were distributed utilizing the long-lived secret key are not compromised. In other words, knowledge or possession of the long-lived key will not yield the adversary any advantage with regard to short-lived keys. Therefore, recorded sessions cannot be "cracked" unless the short-lived session key is also within the knowledge or possession of the adversary. One significant additional advantage is that the protocol of the present invention is completely secure against "interleaving attacks", wherein an adversary poses as a communication partner to engage multiple communication partners, successively or sequentially, in order to obtain a sufficient amount of information from one particular party, and then use that information to gain an advantage against another communication party. This type of interleaving attack is typically referred to in the literature as a "session" attack. In its most common form, the active adversary initiates communication with two different communication partners, and uses communications received from one partner to enter into a key exchange with another partner. The present invention is completely secure against this type of attack.
While the invention has been particularly shown and described with reference to a preferred embodiment, it will be understood by those skilled in the art that various changes in form and detail may be made therein without departing from the spirit and scope of the invention.
|Cited Patent
|Filing date
|Publication date
|Dec 5, 1977
|Mar 11, 1980
|International Business Machines Corporation
|Cryptographic verification of operational keys used in communication networks
|Apr 22, 1981
|Mar 27, 1984
|Siemens Corporation
|Apparatus and method for cryptographic identity verification
|Jun 20, 1983
|Oct 22, 1985
|Cii Honeywell Bull (Societe Anonyme)
|Method for certifying the origin of at least one item of information stored in the memory of a first electronic device and transmitted to a second electronic device, and system for carrying out the method
|Dec 30, 1983
|May 13, 1986
|International Business Machines Corporation
|Polynomial hashing
|Apr 5, 1982
|Jan 19, 1988
|U.S. Philips Corporation
|Method and system for the mutual encyphered indentification between data communicating stations and stations for use with such method and system
|Feb 14, 1983
|Feb 2, 1988
|Prime Computer, Inc.
|Authentication system
|Nov 18, 1985
|Jan 17, 1989
|International Business Machines Corporation
|Secure component authentication system
|Jan 8, 1987
|Feb 14, 1989
|Compfax Corporation
|Method and apparatus for continuously acknowledged link encrypting
|Mar 20, 1991
|Sep 15, 1992
|International Business Machines Corp.
|Authentication protocols in communication networks
|Sep 13, 1991
|Oct 6, 1992
|At&T Bell Laboratories
|Service provision authentication protocol
|Oct 2, 1991
|Aug 31, 1993
|At&T Bell Laboratories
|Cryptographic protocol for secure communications
|Mar 4, 1993
|Mar 29, 1994
|Bell Communications Research, Inc.
|Two-way public key authentication and key agreement for low-cost terminals
|Oct 2, 1992
|Dec 6, 1994
|Bayer Aktiengesellschaft
|Process for the preparation of a mixture of cyclohexylamine and dicyclohexylamine
|Li Gong, et al. "Protecting Poorly Chosen Secrets from Guessing Attacks", Sep. 25, 1992, pp. 1-18.
|Li Gong, et al. Protecting Poorly Chosen Secrets from Guessing Attacks , Sep. 25, 1992, pp. 1 18.
|R. Bird, et al., "Systematic Design of a Family of Attack-Resistant Authentication Protocols", Jun. 1993, pp. 1-28.
|R. Bird, et al., Systematic Design of a Family of Attack Resistant Authentication Protocols , Jun. 1993, pp. 1 28.
|R. R. Jueneman, S. M. Matyas, C. H. Meyer, "Message Authentication", Sep. 1985, vol. 23, No. 9, pp. 29-40.
|R. R. Jueneman, S. M. Matyas, C. H. Meyer, Message Authentication , Sep. 1985, vol. 23, No. 9, pp. 29 40.
|Refik Molva, et al., "Research Report, KryptoKnight Authentication and Key Distribution System", Apr. 1, 1992, pp. 1-17.
|Refik Molva, et al., Research Report, KryptoKnight Authentication and Key Distribution System , Apr. 1, 1992, pp. 1 17.
|Steven M. Bellovin, Michael Merritt, "Encrypted Key Exchange: Password-Based Protocols Secure Against Dictionary Attacks", pp. 1-13.
|Steven M. Bellovin, Michael Merritt, Encrypted Key Exchange: Password Based Protocols Secure Against Dictionary Attacks , pp. 1 13.
|T. Mark A. Lomas, et al. "Reducing Risks from Poorly Chosen Keys", pp. 14-18.
|T. Mark A. Lomas, et al. Reducing Risks from Poorly Chosen Keys , pp. 14 18.
|Citing Patent
|Filing date
|Publication date
|Dec 22, 1995
|Feb 11, 1997
|Virtual Open Network Environment Corp.
|Application level security system and method
|Feb 6, 1995
|Sep 30, 1997
|International Business Machines Corporation
|Block cipher mode of operation for secure, length-preserving encryption
|Sep 12, 1997
|Nov 23, 1999
|International Business Machines Corporation
|Method and apparatus for the secure distributed storage and retrieval of information
|Mar 4, 1998
|Jul 25, 2000
|At&T Corporation
|Apparatus and method for encryption key generation
|Apr 17, 1996
|Sep 12, 2000
|Hewlett-Packard Company
|Methods and apparatus for authenticating an originator of a message
|May 28, 1997
|Oct 17, 2000
|International Business Machines Corporation
|CRC hash compressed server object identifier
|Sep 28, 1998
|Feb 20, 2001
|International Business Machines Corporation
|Smart card mechanism and method for obtaining electronic tickets for goods services over an open communications link
|Jun 23, 1999
|Feb 20, 2001
|International Business Machines Corporation
|Method and apparatus for the secure distributed storage and retrieval of information
|Jan 22, 1997
|Sep 18, 2001
|International Business Machines Corporation
|Method and apparatus for entity authentication and session key generation
|Feb 22, 2000
|Jul 8, 2003
|Zyfer, Inc.
|System and method for secure cryptographic communications
|Oct 28, 1999
|Apr 6, 2004
|Cisco Technology, Inc.
|Password based protocol for secure communications
|Nov 19, 1999
|Dec 14, 2004
|Storage Technology Corporation
|Encryption key management system using multiple smart cards
|Oct 11, 1999
|Feb 28, 2006
|Infineon Technologies Ag
|Method and array for authenticating a first instance and a second instance
|Mar 3, 2000
|Aug 22, 2006
|Kabushiki Kaisha Toshiba
|Cryptographic communication terminal, cryptographic communication center apparatus, cryptographic communication system, and storage medium
|Sep 1, 2004
|May 6, 2008
|Canon Kabushiki Kaisha
|Data sharing method, request processing method, program, and apparatus
|Oct 15, 2003
|Jun 10, 2008
|Qualcomm Incorporated
|Methods and apparatus for extending mobile IP
|Jun 7, 2000
|Nov 11, 2008
|General Instruments Corporation
|Self authentication ciphertext chaining
|May 3, 2002
|Dec 9, 2008
|Microsoft Corporation
|Methods for iteratively deriving security keys for communications sessions
|May 15, 2002
|Apr 21, 2009
|Microsoft Corporation
|Session key security protocol
|Feb 25, 2003
|Oct 20, 2009
|Microsoft Corporation
|Prevention of unauthorized scripts
|May 20, 2004
|Oct 20, 2009
|Microsoft Corporation
|Account creation via a mobile device
|Feb 25, 2003
|Nov 24, 2009
|Microsoft Corporation
|Content alteration for prevention of unauthorized scripts
|May 22, 2001
|Feb 23, 2010
|Qualcomm Incorporated
|Local authentication of mobile subscribers outside their home systems
|Jul 15, 2005
|May 11, 2010
|Honeywell International Inc.
|Property-based data authentication mechanism
|Jun 1, 2005
|Jul 6, 2010
|Qualcomm Incorporated
|Local authentication of mobile subscribers outside their home systems
|Oct 11, 2007
|Aug 17, 2010
|Certicom Corp.
|Key agreement and transport protocol with implicit signatures
|Oct 3, 2005
|Aug 24, 2010
|Nokia Corporation
|System, method and computer program product for authenticating a data agreement between network entities
|Apr 11, 2003
|Sep 28, 2010
|Thomson Licensing
|Method for the anonymous authentication of a data transmitter
|Oct 15, 2003
|May 3, 2011
|Qualcomm Incorporated
|Communications security methods for supporting end-to-end security associations
|Apr 20, 2009
|Jun 28, 2011
|Microsoft Corporation
|Session key security protocol
|Jul 15, 2010
|Jan 3, 2012
|Certicom Corp.
|Key agreement and transport protocol with implicit signatures
|Sep 28, 2006
|Feb 28, 2012
|Hewlett-Packard Development Company, L.P.
|Changing of shared encryption key
|Oct 25, 2001
|Jun 19, 2012
|International Business Machines Corporation
|Hiding sensitive information
|Dec 20, 2007
|Jun 26, 2012
|Certicom Corp.
|Key agreement and transport protocol
|Oct 4, 2006
|Oct 2, 2012
|Sony Computer Entertainment Inc.
|Authentication system and authentication object device
|Apr 3, 2012
|Oct 8, 2013
|Panasonic Corporation
|Home agent acting as a proxy for a Mobile Node
|Feb 1, 2012
|Nov 5, 2013
|Certicom Corp.
|Key agreement and transport protocol
|Sep 27, 2013
|Nov 18, 2014
|Certicom Corp.
|Key agreement and transport protocol
|Oct 15, 2003
|May 20, 2004
|O'neill Alan
|Communications security methods for supporting end-to-end security associations
|Oct 15, 2003
|Aug 12, 2004
|O'neill Alan
|Methods and apparatus for extending mobile IP
|Sep 1, 2004
|May 12, 2005
|Canon Kabushiki Kaisha
|Data sharing method, request processing method, program, and apparatus
|Apr 11, 2003
|Sep 15, 2005
|Eric Diehl
|Method for the anonymous authentication of a data transmitter
|May 20, 2004
|Oct 27, 2005
|Microsoft Corporation
|Account creation via a mobile device
|Jun 1, 2005
|Nov 17, 2005
|Quick Roy F Jr
|Local authentication of mobile subscribers outside their home systems
|Jul 15, 2005
|Jan 18, 2007
|Ghosh Subhas K
|Property-based data authentication mechanism
|Oct 3, 2005
|Apr 5, 2007
|Nokia Corporation
|System, method and computer program product for authenticating a data agreement between network entities
|Oct 4, 2006
|Dec 4, 2008
|Sony Computer Entertainment Inc.
|Authentication System And Authentication Object Device
|Apr 3, 2012
|Jul 26, 2012
|Panasonic Corporation
|Home agent on a home link
|Dec 20, 1996
|Jul 3, 1997
|V One Corp
|Application level security system and method
|U.S. Classification
|713/171, 713/155
|International Classification
|Cooperative Classification
|European Classification
|Mar 18, 1994
Owner name: INTERNATIONAL BUSINESS MACHINES CORPORATION, NEW Y
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:ROGAWAY, PHILLIP WALDER;REEL/FRAME:006940/0869
Effective date: 19940314
|Jun 25, 1999
|Fee payment
Year of fee payment: 4
|Sep 3, 2003
|Maintenance fee reminder mailed
|Feb 13, 2004
|Lapse for failure to pay maintenance fees
|Apr 13, 2004
|Expired due to failure to pay maintenance fee
Effective date: 20040213


text:
Dr. Kenneth P. Jiang graduated from the University of Chicago Pritzker School of Medicine in 1995. He works in Hollister, CA and 1 other location and specializes in Internal Medicine. Dr. Jiang is affiliated with Hazel Hawkins Memorial Hospital and Saint Louise Regional Hospital.
Internal Medicine
Medical School: University of Chicago Pritzker School of Medicine; Graduated 1995
*This physician has multiple office locations. See Office Information for details.
591 McCray St Ste 211
Hollister, CA 95023
901 Sunset Dr Ste 3
Hollister, CA 95023
930 Sunnyslope Rd Ste B1
Hollister, CA 95023
930 Sunset Dr Ste 3
Hollister, CA 95023
930 Sunset Dr Ste C1
Hollister, CA 95023

subset: commoncrawl


text:
Search Results
Search Results Type: Posts; User: catladynurse
From Date
I know how you feel, but, when it comes down to it, we are the hired help. I think how home nurses are treated, even in the best if homes. I never forget that I am there to advocate for my...Nov 19, '12
- Forum: Home Health Nursing
ok so heres my situation, i am severely ADD and i do home care. i faxed in my time sheets today for payroll and now they want me in the office tomorrow to talk to the location manager because i had a...Sep 17, '12
- Forum: General Nursing Discussion
oh come on i know your out there.Sep 6, '12
- Forum: Massachusetts Nursing
I actually work for both,. so shoot me an email at email@example.com 6, '12
- Forum: Massachusetts Nursing
hmmm kindred imn not sure, but i worked at eagle pond before i became a nurse and would not even apply to work as a nurse. just sayinSep 6, '12
- Forum: Massachusetts Nursing
i bet i have mrsa in my nares. as does every other nurse. but you cant isolate a resident or tell them to stay in there room, if there that bad send them to the hospital,. but otherwise you use...Sep 6, '12
- Forum: LTC: Directors Nursing / Assistant
HH agencies typically do not hire new grads. HH nurses work autonomously and are fully repoosnsible. when you graduate you have a clue about nursing but thats it. i strongly encourage you to put in a...Sep 6, '12
- Forum: Home Health Nursing
yes, you did do the right thing, you always call you supervisor immidiatley if there is a discrepancy with narcotics. im betting that the nurse was in a hurry on purpouse. you always always always do...Sep 6, '12
- Forum: Home Health Nursing
i was concerned about my patients gi status since she has low motility and they were aspirating fecal matter out of her stomach, i just felt that bactrim would be way too harsh, also, i have been...Sep 6, '12
- Forum: Nurse Colleague / Patient Relations
I am an LPN and I have been doing home health for a year and a half and i love it. as an lpn youll be pretty darn autonomous. the case managers are always RN's(per licensure requirements) i had a...Sep 5, '12
- Forum: Home Health Nursing
i do understand what my licensure allows me to do, which is why this is ******* me off so much, i feel like this is how theyre getting around phasing out lpn's its not state law its just becoming...Aug 27, '12
- Forum: General Nursing Discussion
Honestly I'm starting to think I need to tell people off more aften. Think I'm being to niceAug 26, '12
- Forum: Nurse Colleague / Patient Relations
i would not take my lpn to rn at my local college for all the money in the world. they turn out horrible nurses. anyway i am doing mine all online thru college network and have but half the pre req;s...Aug 26, '12
- Forum: General Nursing Discussion
become a sponge and ask questions. becuase it always ends up that the question you should have asked was the one you didnt. youll be able to tell which nurses wont help and which ones will. be very...Aug 26, '12
- Forum: First Year After Nursing Licensure
So I was visiting my patient in the hospital who is just gaining back bowel sounds and has alot of bowel issues ... well now, she has MRSA and the doc comes in and says, "Well the vaco is covering...Aug 26, '12
- Forum: Nurse Colleague / Patient Relations
there have been moments in my short career where i have questioned my decision to become a nurse, now i love what i do, i am gaining confidence and i am going for my rn then bsn. be determined and...Aug 26, '12
- Forum: NCLEX Discussion Forum
so ive been doing home care for my girl for a year and a half, she came off TPN via PICC in june, well now shes in hospital and has a central port and getting TPN again, and now theyre telling mom...Aug 26, '12
- Forum: General Nursing Discussion


text:
The Chain Theatre was established in 2012 with the mission to create a supportive community where artists could hone their craft, present new works and revive classics from the American tradition. Since then, the 75-seat venue has helped develop up-and-coming pieces such as "Dragula" and "Einstein," while also hosting such time-honored masterpieces as "Talk Radio" and "One Flew Over the Cuckoo's Nest."
On June 12, the Long Island City performance space will kick off the Unchained Theatre Festival, which will run until June 28. This third annual extravaganza will present 15 pieces — eight shorts and seven full-length plays — chosen through a blind selection process. Each will run three times in different blocks.
One play, Patrick Cann's "Alice!," is a modern day imagining of "Alice in Wonderland" with puppets, dancing and references to Shakespeare and Nietzsche.
"¡Oso Fabuloso & The Bear Backs!," a campy musical by J. Julian Christopher, tells the story of a gay, singing bear who goes on tour to forget about a painful breakup.
"The Door to Home" by Eugene Grygo, whose comedy about therapy sessions wowed last year's festival, is a family drama about an aging mother's strained relationship with her 30-year-old son.
The audiences and a few judges will vote on the best play, best director, best leading actor and audience favorite. The winning work will be performed once more during the finale on June 28.


text:
Shooting Video
Skill level
- Beginner (2)
- Intermediate (2)
- Advanced (2)
- Appropriate for all
- Adobe (2)
- After Effects (2)
- Apple
- Final Cut Pro (2)
- Premiere Pro (2)
- Lightroom (1)
- Photoshop (1)
More options
Get on-location tips and post-production techniques to speed up time and create compelling visual effects with time-lapse photography.
Capture footage of everyday objects and combine it with effects in popular postproduction tools like After Effects and Premiere Pro, resulting in rich, abstract backdrops for your project.
"I'm a new subscriber. I'm 10 minutes in and I can't thank you enough. I'm learning what would normally cost me nearly $1,000!" —Melissa K.
more from our members »


text:
Chinti and Parker's striped top is made from the brand's super soft, eco-friendly organic cotton-jersey. We love the playful papaya heart print. This loose-fitting piece is the perfect weekend style.
Navy and white striped organic cotton-jerseyBreast pocket, papaya heart printSlips on100% organic cottonHand wash
Product code: 415971 - Need help? Contact us


text:
Written on: 30/04/2014 by Leolucy (1 review written)
Dosnt do all the things the advert says it does.
Mines now broken leaking water. Makes cleaning take twice as long for windows etc as just spreads dirt around !! My husband done half the oven door with a sponge I done half with x5 my half didn't shift his was clean in a few mins with soap and a scour pad!! Please don't waste your money on this product.
As rated by our community of reviewers
" Trash, would make a skip look untidy " Read More
" Do not touch it with a bargepole! " Read More
" Bit of a toy " Read More
Written by andyandy1942
" This is clearly a "Marmite" product! " Read More
" Useless Machine Usless Customer Service " Read More


text: Dino Flammia, Townsquare Media NJ [ Townhouses in greater demand in New Jersey By Dino Flammia May 5, 2015 The needs of two competing generations have combined to form a greater demand for townhomes across the Garden State and the country, and in some areas, builders are struggling to keep up. Read More|Comment Category: Money & Business, Nation & World, New Jersey News, News Tags: housing, Newsletter, townhomes, townhouses Send to a friend! Share on Facebook Share on Twitter Pin it! Reddit This! Share on Tumblr!


text:
- Year
- 2013 / 2012 / 2011 / 2010 / 2009 / 2008 / 2007 / 2006 / 2005 / 2004 / 2003 / 2002 / 2001 / >2000 / 1999
- Month
- Jan / Feb / Mar / Apr / May / Jun / Jul / Aug / Sep / Oct / Nov / Dec
- Day
- 1 / 2 / 3 / 4 / 5 / 6 / 7 / 8 / 9 / 10 / 11 / 12 / 13 / 14 / 15 / 16 / 17 / 18 / 19 / 20 / 21 / 22 / 23 / 24 / 25 / 26 / 27 / 28 / 29 / 30 / 31
Articles published on July 31, 2012
3-vehicle crash briefly closes I-75 southbound
By Jon Silman Staff writer
Bama, LSU and SEC aim to stay on top
The Associated Press
Consumer confidence on the rise in state, survey shows
By Anthony Clark Business editor
Dozens cite lack of urgency in locating missing man
By Cindy Swirko Staff writer
Discovery of fake pot, $3 million in cash is part of a nationwide sweep
By Shayna Posses Correspondent
Easley named to Hendricks Award watch list
Special to Gatorsports.com
Exactech reports 7 percent spike in quarterly revenue
By Anthony Clark Business editor
Exonerated Fla. man charged in recent shooting
The Associated Press
Florida education chief resigns after just a year
The Associated Press
Feline virus forces shelter to stop accepting, adopting out cats
By Cindy Swirko Staff writer
Fla. lieutenant governor's brother-in-law indicted
The Associated Press
F. Douglas Stephenson: Scott's Medicaid decision is outrageous
Fla. teen shot while riding home from church
The Associated Press
Fennel: What it is and how to use it
The Associated Press
Gators set to begin preseason training camp
By Robbie Andreu Staff writer
GPD: Video shows Dollar General robber entering store
Staff report
Golden again, US wins 1st Olympic title since '96
The Associated Press
GPD: Hit-and-run driver arrested after injuring pedestrian
By Jon Silman Staff writer
GHS's James receives UF offer
By Paul Kardasz Correspondent
Haute wheels: Fashion takes a cue from food trucks
The Associated Press
Is your problem gluten? Or faddish eating?
The Associated Press
Jay's Bridal to shut down after 77 years
By Anthony Clark Business editor
Longtime area businessman, civic leader Howard Hall dies at 90
By Anthony Clark Business editor
Lochte, Dwyer help Phelps to Olympic record
The Associated Press
Letters to the Editor for July 31, 2012
Latest swimwear fashion takes nod from the past
By Suzette Laboy The Associated Press
Marvin Dunn: A park in memory of Rosewood
NCAA adds 1-year postseason bans to UCF penalties
The Associated Press
Olympics awash in Twitter, for better or worse
The Associated Press
Process to close Sweetwater Elementary begins
By Joey Flechas Staff Writer
Parents plan lawsuits after football players die
The Associated Press
Petition calls on UF to ditch Chick-fil-A from campus
Puppet protests a problem at Republican convention
The Associated Press
Rainey gaining big role with Steelers
By Talal Elmasry Pro Gators beat writer
RTI's quarterly earnings up 4 percent
By Anthony Clark Business editor
Rihanna, Drake score 5 Video Music Award nods
The Associated Press
State pledges funds, regulations to clean up Silver Springs
By Fred Hiers Staff writer
Safety Harris enjoys visit to Swamp
By Zach Abolverdi Correspondent
Stores prep for 'second Christmas' sales tax holiday
By Joey Flechas Staff Writer
Santa Fe College employees not paid as scheduled due to technical problem
By Joey Flechas Staff writer
Silver Airways adds daily Atlanta-Gainesville flights
By Anthony Clark Business editor
Small farmers struggle as drought kills vegetables
The Associated Press
Tebow, Jets get a day off
The Associated Press
Terry Brant: Failing to protect Florida's water
This year's rule changes just may cause some chaos
By Pat Dooley Columnist
UF alum Dwyer part of gold-medal effort
By Nick Zaccardi Correspondent
U.S. women top N. Korea 1-0, win Olympic soccer group
The Associated Press
US consumers more confident in the economy in July
The Associated Press
Vikings use Harvin's versatility
The Associated Press
Images of the DayFlorida alum Conor Dwyer swims in the men's 200-meter individual medley preliminaries at the U.S. Olympic swimming trials on Friday, June 29, 2012, in Omaha, Neb. (AP Photo/Mark Humphrey)
Florida head coach Will Muschamp coaches the defensive secondary players during spring practice in Gainesville on March 17. Players will report to fall camp on Thursday.
Alabama quarterback AJ McCarron (10) looks for a receiver out of the pocket against the LSU during the first half of the BCS National Championship college football game Monday, Jan. 9, 2012, in New Orleans. (AP Photo/Gerald Herbert)
Minnesota Vikings wide receiver Percy Harvin (12) runs the ball during a punt return drill in the Saturday morning walk-thru in Mankato, Minn. (AP)
In this June 29, 2012 file photo, Greece's Voula Papachristou lands in the sand after her jump at the Women's Triple Jump final at the European Athletics Championships in Helsinki, Finland. The Hellenic Olympic Committee has removed Papachristou from Greece's 2012 Olympic team over comments she made on twitter making fun of African immigrants and expressing support for a far-right party. For better and for worse, the 2012 Olympics are being shaped, shaken and indisputably changed by social media sites such as Twitter, whose immediacy and public nature has added a new and chaotic element to the Games. (AP Photo/Matt Dunham, File)
Dudley Farm State Park, in Newberry
In this file photo, guests watch as a Saab 340Bplus Aircraft taxis to the hanger during a press conference to announce Silver Airways as a new general aviation tenant at the Gainesville Regional Airport on Friday, Jan. 20, 2012, in Gainesville, Fla.
Tony James (3), who played at Buchholz last season before transferring to Gainesville High this summer, returns a kick against the Chiles Timberwolves at Citizens Field last year.


text:
Jim Larranaga has plenty to be happy about. So do his players.
After winning the ACC championship with an 87-77 win over North Carolina, Miami's head coach (and newly named ACC Coach of the Year) gave a victorious post-game interview that was made one thousand times better by senior forward Julian Gamble popping up in the background.
As you were, TV viewing audience.
Read or Share this story: http://usat.ly/104hbAP


text:
Hello, Hello. Sign In
Please enter a valid city, state or zip code
114 reviews | 4.6 out of 5
I bought this product for my daughter for Christmas. She told me that she really liked it because it came as a kit. She went on to add that she particularlly liked the strap that is included in this kit. The reason she likes the strap is because she is a beginner and found it difficult to hold some of the positions. She said that the strap helped her to be able to hold the positions and that without it she would not have been able to. Eventually, you are not supposed to need the strap.
The mat and brick and strap were what I was expecting but the DVD was way better than I had imagined and it had a good mix of easy to do and challenging positions. The pace of the DVD was also good for a beginner. Out of the 5 other yoga DVDs that I have tried, this is one of the best.
I bought this yoga kit soon after I started my first yoga class. Our instructor suggested the students buy a yoga mat, block and strap. This product provided a significant savings over purchasing each item separately. The mat is bright pink, with The Firm's logo in white lettering. The block is purple with The Firm's logo in white lettering. The belt is purple. I doubt that I would have found the belt or block for sale anywhere in my remote area.
The mat is fine and meets all standard requirements, and is the proper dimensions. The mat is textured and is non-slip . It will be just great for beginners or anyone who doesn't need a thicker mat.
A standard yoga block is made of a very study, lightweight foam; you will not crush it by lying or sitting on it; it is used in some yoga moves, but not for all. The standard size of a yoga block is 4 X 6 X 8 inches, but the one in this kit is 3 X 5.375 X 8.75 inches. It is made of the right kind of foam, and is easier for my smaller hands to grasp, but for some uses, it is a bit too thin and not wide enough. For instance, in exercises that require lying down and positioning the block under the small of the back, or when sitting on the block, this block may not be quite thick enough. Some people will find 2 yoga blocks helpful from time to time; I plan on buying an additional standard size block later.
My instructor suggested a 6- or 8- foot D-ring strap, which is the standard for yoga. A D-ring strap is made of a cloth mesh, and has 2 closed D-shaped rings that are sewn together in a loop at the end of the belt, with the flat portion of the D-shape within the loop. You've probably seen a D-ring on some waist belts. Though I haven't yet had much use for the belt in my yoga class, I can see how a D-ring would be very useful. This kit's 6-foot belt should be long enough for most purposes, but has a different kind of cinch to it, which I've seen more often on fanny-packs from years ago, using a plastic cinch with teeth to hold the belt in a certain position. This belt will work fine if you won't be using it as part of a series of moves, but if you need to more quickly adjust the length, this belt may not do as well.
I haven't yet used the DVD, but I would assume the other reviews of this kit's video are accurate. I'll be glad to have the DVD when the yoga class is no longer offered in my area, and for a refresher on the moves and correct form.
Overall, the kit offers a good value, and most beginners will find it is sufficient. I did hope all the items would be the standard size, because already I am finding that, for this purpose, size does matter! More advanced or very dedicated yoga students may wish to buy standard yoga items separately.
Not too hard for beginners, but hard enough that you feel it. The stretches are great!!!
I'm taller than the average woman at 5' 7" and this mat is the perfect size! I really like that the mat doesn't slip and slide all around and provides just enough cushion even for us bigger gals. I'm not very flexible so the block and strap really help out in more than just the exercises on the video. The video is very easy to follow and easy to understand. The yoga workout included is about half an hour which is nice. I have found a way to make the strap carry my mat which is convenient. The block is very strong, sturdy and light weight. The strap seems to be quite strong as well. I expected for one of the products I got to at least be kind of cheaply made. Everything exceeded my expectations.
This is a great value for the price. Great for beginners! I feel very relaxed and stretched after doing this DVD and I am plus sized woman so anyone can do it!!
I have been wanting to try yoga for a while now and have tried Jillians Yoga Meltdown but I have say that I think that DVD is for athletes NOT beginners! It was way too hard for me! So I searched here on walmart.com and found this beginners kit and WOW! It is truly for beginners with little to no flexibility. The poses are easy to do and you feel stretched out afterward. I was in drill team in high school about 10 years ago and I wanted to get my flexibility back and I believe that this yoga dvd will help. I have only been doing it for 3 days but already am seeing better movement, strength, balance, and flexibility! The brick and strap I was skeptical about but they are fantastic tools and really help you! The mat is great but if your palms get sweaty doing the downward facing dog is a little tricky! If you are a beginner in yoga and want to give it a try I would recommend this product. Great price and motivational dvd!
I haven't worked out in forever and was afraid to jump back into it after having a baby. This kit is super easy and relaxing. I love the pink mat and purple accessories. It's a great deal. A good mat alone is $25. If your looking for something to help ease you back into excercise or just an easy unwinding method for the end of the day, this is it!
If you have never done Yoga before, as I have not, this is a very good and easy way to learn it. They move slow enough for you to learn the moves but not so slow that you get bored.
This was a great product!! It makes yoga fun, and easy. The thirty minutes go by so quickly. It's actually a workout I can finish then can't wait to do again. I am by no means a fitness guru. Lot's of jumping and kicking and sweating is not my cup of tea. When looking to get into a exercise program I wanted something that would be easy for me to get into, and also show results. I've never done yoga before this program and I found it easy and relaxing. Even though it was not very difficult I have definitely seen results. THIS IS A GREAT PRODUCT FOR SOMEONE FINDING THEIR WAY INTO FITNESS.
The Firm Yoga Beginner's kit is nice but what makes this product special is the beginner's yoga tape which teaches you how to use the product correctly. 4 thumbs up.
This is a great little kit for yoga beginners. The mat is much nicer then the blanket I've been using and doesn't slip around. Block and strap are nice too. I really like the video that comes with the kit. It's a good workout, not too difficult and only 30 minutes so you can work it into a busy day fairly easily. The lady on the video is a little perkier than most yoga instructers I've seen, but I suppose I can live with that! :)
Great Value! The mat is of excellent quality and very comfortable, the whole set is just great and at a great price! I have been using the set daily following the DVD which is perfect for a beginner. I've noticed that my flexibility has already slightly increased in just 5 workouts! Extremely happy with my purchase!
I was only looking for an exercise mat to do my stretches on, after my workouts at the gym. I had planned on paying about 15.00. When I saw that this came with not only the mat, but also a DVD and two props, to do Yoga with, I was excited. I thought this was a great deal, and I had always wanted to try Yoga too. The only draw back, is that if you put the mat on carpet, it wants to bunch up. I am sure when I put it on the gym floor, it will work just fine.
A very helpful product with all the basic stuff for yoga beginners, including the DVD, which is easy to follow and understand, except for a few positions that will be difficult at the beginning, but if you continue trying to do them, you will finally made it.
Kinda slippery for planks.
Looks red, but it's definately pink.
You can definatly get a great workout with this product. Felt it the first time I used it
I'm a big fan of THE FIRM workout DVD's & when I saw yoga I had to try it. It's a great 30min DVD lead by master instructor Allie. I've only had this a couple weeks and already see a difference in my flexibility!
This year (2008) I decided to get into shape, lose weight and generally feel good. So I got the beginner's yoga kit to assist me in my time of exercise! I am 53 years old, so that is why the beginner's kit. I set up 3 days a week and I really feel good! It is addictive!


text:
About Pentucket Medical Associates
Office Locations
Our Physicians
Dr. Shampa Chatterjee, MD1 Park Way
Haverhill, MA 01830
Dr. Jason Hemming, MD1 Park Way
Haverhill, MA 01830 – More Locations
Pentucket Medical Associates
Gastroenterology, Internal Medicine
1 Park WayHaverhill, MA 01830
(888) 227-3762
© Copyright 2015 Healthgrades Operating Company, Inc. Patent US Nos. 7,752,060 and 8,719,052. All Rights Reserved.
Third Party materials included herein protected under copyright law.
Use of this website and any information contained herein is governed by the Healthgrades User Agreement.


text:
Daytrip Leopard Print Lace Tank Top
Sorry, this product is currently not available on buckle.com.
- Mesh and sequin neckline trim tank
- Adjustable straps
- Layering piece(s) sold separately
- 85% Nylon, 15% Spandex.
- Hand wash in cold water, separately. Do not bleach. Hang to dry. Cool iron if needed.
- Made in China.
Have a Question?
- Body length 28" on size medium.


text:
Application Information
Get Instant Scholarship Matches
Complete your free profile to get personalized matches to over $ll billion in scholarship rewards.
Scholarship Overview
This scholarship is for women who are graduating high school seniors in Beaver County, Pennsylvania. To qualify for this scholarship, applicants must have a 3.75 GPA and plan to attend a college or university.
How easy is it to apply?
Very quick!
This scholarship's application process should probably take a very short time.
How much competition is there?
Relatively little!
This scholarship has a relatively low number of applicants.
GPA: Is this you?
- 3.75
Gender: Is this you?
- Female
Class Year: Is this you?
- High school senior
Home State: Is this you?
- Pennsylvania
Location: Is this you?
- Beaver County


text:
As an apprentice you have to be ready for hard work
alot of physical work, installing lights and long hours
mainly camp work 15/6 or 24/4
this is all depending on location
About AECOM and URS
Together AECOM and URS are one of the world's premier, fully integrated infrastructure and support services firms. We design, build, finance and operate infrastructure assets in more than 150 countries around the world—across a broad range of markets including transportation, facilities, environmental, energy, water and government – more... services. Our nearly 100,000 employees blend technical expertise with local knowledge to deliver innovations that have a positive physical, social and environmental impact on our world. – less


text:
Originally posted on Fox Sports Arizona | Last updated 7/22/12
PHOENIX -- On Family Day at Chase Field on Sunday, Chris Young brought his English bulldog -- named Prince Superman Young -- into the clubhouse following another big win over the Astros. It made for some nice symbolism. Young has brought some bulldog to the park himself recently, and he appears to be returning to the form that made him one of the most feared hitters in the National League the first 10 days of the season but has taken some time to regain after a shoulder injury put him on the disabled list for the first time in his career. You trust that if you continue to get your work in, everything will be all right, Young said. Youngs three-run home run in a seven-run sixth inning was the game-decider in an 8-2 victory over the Astros, giving the D-backs (47-48) a three-game sweep and pulling them within one game of .500 for the first time since the All-Star break. Young has four doubles, two homers and six RBIs in his last seven games, numbers that could cause a shudder to t...
MLB News
Delivered to your inbox
You'll also receive Yardbarker's daily Top 10, featuring the best sports stories from around the web. Customize your newsletter to get articles on your favorite sports and teams. And the best part? It's free!
Follow us on Twitter
|Best of Yardbarker
|NFL News
|MLB News
Today's Best Stuff
For Publishers
Company Info
Follow Yardbarker
|© 2015 Yardbarker, Inc. All rights reserved. Use of this website (including any and all parts and components) constitutes your acceptance of these Terms of Use and Privacy Policy. (What's New?)


text:
Deviant Art
Prussia/Denmark/America X Reader "Mathias get off of me."More Like This
"No, thank you."
"Alfred, you too."
"No thanks, babe~"
"Stop calling me that."
"What was that, babe?"
A loud groan of exasperation came from your crushed figure. Your friends had decided to crash your apartment and were currently clinging to you. If they held on any tighter, you'd die for sure.
"I'm AWESOOOOOOME~" Gilbert took a running leap and landed on the pile of people, all on top of you. An inhuman noise was heard by all the guys and they looked at you, eyes wide.
"Oh god, my insides are dying." Your voice was harsh and dry, since the wind had been knocked out of you. "Get the hell off of me."
"Noooooo!" they all chorused in the same whiney tone. After flailing
|Sta.sh Submit


text:
Jaguar Repair in Cedar Hill
Our master mechanics identify the best Jaguar repair shops in Cedar Hill. Edit search×
- AAA Member Discount
- Coffee
- Heated Waiting Room
- Open Saturday
- Parts/Accessories
- Service Guarantee
- Shopping Nearby
- Warranty Accepted
- Wireless Internet
- AC/Heating
- Alignment
- Check Engine Light
- Diagnosis
- Muffler & Exhaust
- Oil Change & Lube
- Scheduled Maintenance
- Service & Repair
- Smog/Emissions Testing
- Timing Belts
- Transmission Repair
Real Customer Review(s)
Kwik Kar Auto Service & Repair Center on Brown Blvd. was opened in 1995 by Michael Pugh. Michael has had a life-long love affair with cars starting with his employment at fourteen with a Ford dealership. Over the years, the cars have changed, but the basic need for quality maintenance and repair delivered to customers in an honest and timely manner remains.
Michael and his family still run Kwik Kar going into their 17th year. They offer full service maintenance and repair. With a 5 year, 50,000 mile warranty on most repairs, you know you will be getting a quality job done right the first time.
There are 23 Jaguar service shops and mechanics in Cedar Hill. Edit searchSee other Jaguar repair shops and dealerships
RepairPal has not certified the following shops.
The shops listed below are not committed to the fair price guarantee and minimum warranty of RepairPal Certified shops. When taking your car to a shop that has not passed RepairPal's inspection, we recommend that you:
- Look for a shop with ASE-certified technicians.
- Request written estimates from multiple shops and check them with the RepairPal estimator
- Verify that the shop you select is willing and able to clearly explain the work being performed.
Jaguar repair shops and dealerships near Cedar Hill.
"GREAT auto shop. So happy I found someone honest and affordable. I failed my inspection and was referred to them by a..."
"I have had several cars worked on at Complete Auto Repair, Inc. These people are competent, honest and fair. I've ha..."
"They fixed repairs other shops attempted.
I had the rear drums cleaned & serviced. They squeeked a little so they ga..."
"The counter staff is very knowledgeable but the techs have crappy workmanship. I have brought in 2 cars for different..."


text:
Beyond the Finish Line follows the Rockstar Energy Racing team on and off the track as they take on the 2013 moto season. �Get a behind the scenes look at what it takes to be the best and the perks that come with it. Episodes will be dropping every two weeks starting in January and running through the entire supercross and motocross seasons. Subscribe to the Rockstar channel to see each new episode as they drop.
More Dirt Bike Videos
More Dirt Bike Lifestyle Content
Other Dirt Bike Content
Most Popular Content
How To Make A Dirt Bike Street Legal 2 Stroke vs 4 Stroke Dirt Bike - How They Measure Up On The Track Kids Dirt Bikes - Choosing the Right Starter Bike 5 Mistakes Dirt Bike Beginners Make The Ultimate Dirt Bike Sprocket & Gearing Guide A Guide to Dirt Bike Oils: 2-Stroke & 4-Stroke Choosing The Best ATV For Beginners A Simple Guide To Jetting Your Carb Choosing Between A 125 2 Stroke Or 250 4 Stroke Best Dirt Bike Models for Kids


text:
Dead as of 12/3/2013. Those of you who come here to learn the best methods to make free money, well I have a special treat today. This ultimate post will help you make $300 from Bank of America's Keep the Change program (KTC). It is a Bank of America program whereas they will match up to $250 of the change from your debit transactions for the first 3 months. Lets say you buy a coffee drink for $2.25; instead, it will show up as a $3 charge, and the 75 cents goes into your savings account. KTC will also put in another 75 cents to match your savings. In short, you want the charges to be $1.01, $2.01, $3.01, etc to maximize this deal.
Follow these steps:
- Sign up a checking account using Bank of America $50 bonus link.
- For simplicity sake, deposit $500 in your account.
- In order to do keep the change, you must sign up for a savings account(this can be done when opening a checking). **You must set up $25 auto transfer each month from Checking to Savings for Savings account to be free.
- Once you have your checking, savings, and debit card, visit this Keep the Change link to enroll.
- You will have a 3-month window to get the $250 match. Here are a the quickest ways to maximize this offer. 1) Go late at night and pump gas at $1.01 each time. Do this every time you need to fill up your gas tank, so give and take about 253x at $1.01 each time. 2) You could also pay your phone bill, water bill, or electricity bill at $1.01 each time online. Check with your utility company to see the policy on this.
More Tips on this Promotion:
- You want to take a screen shot of each offer just in case you might have to fight them. BOA are notoriously known for not handing out bonus on time.
- You can always take money out of the savings and put it back into your checking account. Watch your balance or deposit more so you won't over withdraw
- Hard pull will only be done once for your first account, and soft pull everything afterward.
According to their Terms and Conditions, you can have up to 5 Checking Accounts hence 5 Keep the Change participation($250 KTC5x = $1250). At the end of the 3 months, open up another checking account online and enroll again in Keep the Change. You do not have to open another savings account. Simply link the new Checking to the first Savings account. The same rules apply, then do it again after 3 more months until you got 5 total Checking accounts. You should get $250 at each account anniversary. Again, you are following their terms and conditions, and nothing above is illegal. Is it wasting time and money of the merchants? That's for you to decide. However, you might want to pump gas at a big chain station during the night so you won't draw attention to yourself. Read our full list of Bank of America Promotions!
Find all bank bonuses from our list!
|Chase Sapphire Preferred® Card offers 40,000 bonus points after you spend $4,000 in purchases within the first 3 months. With 40,000 bonus points, you can redeem for $500 towards airfare and hotel accommodations. You can earn an additional 5,000 bonus points after you add the first authorized user and make a purchase in the first 3 months from account opening. Earn 2x points on travel, 2x points on dining at restaurants, and 1 point per dollar on all other purchases. Your points go far since you get 20% off travel when redeemed thru Ultimate Rewards. All Chase Sapphire Preferred cardholders enjoy travel benefits and a direct access to a live adviser 24 hours a day. No foreign transaction fees, plus Chip and Signature enabled for international travel. The annual fee of $95 is waived for the first year of card ownership. Apply Now---Chase Sapphire Preferred Review


text:
Comment DisableGWX (Score 2, Insightful) 288
First off, If there's no reason not to upgrade other than FUD, then they should update. 7 only has a little more than 4 years left and is already in extended support and windows 8/8.1 interface is crap vs 10. If they're worried about being spied on stay with a Local account and don't setup a Microsoft account. It will only take the same telemetry that they've been doing since the customer experience program in vista, which you can then turn off. That being said MS shouldn't have started downloading the OS on PC's without explicit reservations but even that can be disabled.
Easiest method to disable windows 10 from updating is to use the DisableGWX Policy setting. This site's Method 3 will walk you through setting the registry key. Microsoft Also has some other blocking methods as well.
If you just want security patches from that point forward go to windows update settings and uncheck "give me Recommended updates the same way I receive important updates"


text:
if one million Americans spent the next year serving in our schools, our health centers, our communities struggling with poverty or disaster. Join us!
ServiceNation is bringing together leading service nonprofits with the entertainment industry, leading Americans, great companies, media and digital partners, politicians of both parties, and everyday citizens to build a powerful campaign to make national service part of the American way of life. Read more.
The ServiceNation Coalition is made up of over 560 organizations in all 50 states united in our support of national service in America. The coalition showcases the value and impact AmeriCorps and Senior Corps members have in communities across the country to elected officials, the media, and the public. Read more.
ServiceNation Joins Starbucks' 100,000 Opportunities Initiative as National Service Partner; Expands to Chicago Read more.
I was in the audience at Exeter High School in New Hampshire where Hillary Clinton unveiled a plan that included an increase in service year opportunities from 75,000 to 250,000 per year and a "guarantee" that AmeriCorps Alums will be able to attend a public university or college debt-free! Read more.


text:
Ubuntu 9.04 Server Certified on HP ProLiant G6
Hewlett-Packard and the Canonical Linux firm have announced certification of the Ubuntu 9.04 Server Edition on HP's ProLiant G6 server family.
The family addition from the certification agreement of Ubuntu software and HP hardware provides 17 ProLiant configurations. Tests for certification took place in the Canonical Labs and HP found them worthy. A ProLiant support pack for Ubuntu is a palpable result for users. It includes services, drivers and tools for server management, and will be provided by HP.
HP expanded its ProLiant G6 server line in early June by 11 new models. Some of the models are the first with the six-core AMD Opteron processor. HP considers the new servers "powerful, cost-effective, and energy-efficient."
Issue 180/2015
Buy this issue as a PDF
Bugzilla Bug
Bug database has a bug of its own that could allow an intruder to create an unauthorized account.
US Launches New Strategy for Broadband Access
Report focuses federal resources on achieving universal Internet access.
RC4 Finally Gets the Fork
Leading browser makers say "no" to porous encryption algorithm
IBM Says TOR Network a Vehicle for Ransomware
Report from the X-Force group says attackers are using TOR to hide their crimes
Mozilla Announces new Firefox API
Future Firefox extensions will be compatible with Chrome.
Weird Security Flaw Affected Intel Chips for 16 Years
Better read this if you bought your computer before 2011
OpenSSH 7.0 Secure Shell Arrives
Users should upgrade to the new version as soon as possible
Qemu Flaw Lets the Guest Escape
Xen project announces a privilege escalation problem for Qemu host systems
Android Bug Threatens Millions of Users
Attackers can compromise an Android phone just by sending a text message
Lenovo and Canonical Announce Laptop Deal
PC vendor will pre-install Ubuntu on portables in India.


text:
- Find a rental
- Manage your booking
- Crans-Montana rentals
- Kid Friendly Crans-Montana Rentals
- Crans-Montana Mountain View Rentals
- Pet Friendly Crans-Montana Rentals
- Crans-Montana Rentals with Pool
- 3 Bedroom Crans-Montana Rentals
- Last Minute Crans-Montana Rentals
- 2 Bedroom Crans-Montana Rentals
- Crans-Montana Rentals with Hot Tub
- Cheap Crans-Montana Rentals
- See more rentals
- How to book
- Help Center
- Write a review
Crans Montana - prime Swiss Alp winter ski resort
From $1,372 / week
Payment Protection
Description from the manager
Description from the manager
Bedrooms: 2/
Bathrooms: 2/
Sleeps: 4/
Type: Resort
Apartment in prime Swiss Alp winter ski resort and summer vacation rental in Crans Montana, Switzerland 250meters from the skilift and town.
Beautiful views and warm atmosphere in this comfortable 2 bedroom apartment with large terrace. Spacious, charming living room with fireplace, wooden parquet floors and sweeping views of the surrounding Alps and the town of Crans Montana.
The building is a typical chalet style .
Off the living room is the lovely large terrace with dining table and chairs that enjoys sunshine all day and the perfect spot for relaxing and bathing in the sun. There is a seperate kitchen that is fully equipped with fridge, freezer, ...Read more
About the manager
About the manager
Mr. Darren Saxon
Mr. Darren Saxon
- Response rate: 55%
- Response time: Within a day
- Calendar updated: 7 months ago
Overall rating:
Additional Location Information
Getting There
Car is not necessary


text:
Friday's sports TV/radio programming
Published January 17, 2013 4:25 pm
This is an archived article that was published on sltrib.com in 2013, and information in the article may be outdated. It is provided only for personal research purposes and may not be reprinted.
Auto racing • Dakar Rally, stage 13, midnight, NBCSN
Golf • PGA Tour, Humana Challenge, 1 p.m., TGC
• Champions Tour, Mitsubishi Electric Championship, 5:30 p.m., TGC
• European PGA Tour, Abu Dhabi Championship, 2 a.m., TGC
Men's college hockey • Harvard at Yale, 5:30 p.m., NBCSN
NBA • Chicago at Boston, 5 p.m., ESPN
• Oklahoma City at Dallas, 7:30 p.m., ESPN
Tennis • Australian Open, third round, noon (tape), 7 p.m., 1 a.m., ESPN2
Hockey • ECHL, Bakersfield at Utah, 7 p.m., 1320 AM
Women's college basketball • Arizona at Utah, 7 p.m., 700 AM
The Big Show • Hosted by Tribune columnist Gordon Monson, 3-6 p.m., 1280 AM, 960 AM, 97.5 FM
Reader comments on sltrib.com are the opinions of the writer, not The Salt Lake Tribune. We will delete comments containing obscenities, personal attacks and inappropriate or offensive remarks. Flagrant or repeat violators will be banned. If you see an objectionable comment, please alert us by clicking the arrow on the upper right side of the comment and selecting "Flag comment as inappropriate". If you've recently registered with Disqus or aren't seeing your comments immediately, you may need to verify your email address. To do so, visit disqus.com/account.comments powered by Disqus
See more about comments here.
See more about comments here.


text:
No one wants to think about what will happen to their retirement savings after they die. But if you don't take a few minutes to name your beneficiaries, your loved ones could face an extra burden down the road.
Keep your designation current! Sign in to your account and follow the instructions there to designate or change your beneficiary today.
As you know, the stock market has recently experienced some volatility. We're here to say take this volatility in stride. While wild swings in the market can be seriously unsettling, short-term volatility is an accepted risk of investing. For a brief synopsis of what's going on and what you should do, read this brief article.
More than 15 million Americans are caring for an individual living with Alzheimer's or another form of dementia, according to the Alzheimer's Association®. With all the obstacles facing a first-time caregiver, financial planning may be one of the most intimidating challenges. To help guide you through the process, Transamerica collaborated with researchers at the Massachusetts Institute of Technology (MIT) AgeLab to write The Caregiver's Guide to Financial Planning in the Shadow of Dementia.
The OnTrack® tool offers a comprehensive view of your total retirement savings picture, both inside and outside your organization-sponsored plan. In fact, the more information you provide, the more comprehensive your view will be.


text:
Awesome Illustrations by Abraao Lucas
About The Author
I am the owner of Pondly.com / art lover / electrical engineer / software developer / MBA in e-business student. I blog for pleasure and love to share my Internet findings.
Discover More on Pondly
- Character Illustration by Mark Fredrickson
- Fantasy Illustration by Genzoman
- Incredibly Detailed Ink Drawing by Sagaki Keita
- An Eye for Beauty – Graphic Design by Gracie Padron
- Iconic Hollywood Characters by Mihalyi Anita
- Full Moon – Amazing 3D Images by Nikita Veprikov
- Stick 'Em With the Pointy End – Character Illustrations by Ania Mitura
- Classic Comic Illustrations by Shanghai Tango
I know it's part of the style, but really, is this supposed to be illustration or…? Until you start having all male characters wear nothing but jock-straps, I'm afraid I'll have to keep protesting against this way of depicting almost every female character.
ye I'd like to see a picture where he's got the guy in a jockstrap with one of his testes seductively hanging out the side
i agree with the poster above me.. its all too apparent that the females in these pictures are designed to be jacked off over.. whether by yourself or by your audience…
don't get me wrong some of the pics are cool, but your desperation is shining through and it ruins it for anyone not sexually repressed


text:
Visit our other Wisconsin Historical Society websites!
Refine or narrow your results by clicking any term in the gray boxes below.
Expand your results by removing any breadcrumb in a gray outlined box above. Click on the blue "X" to remove the term.
Narrow your results by entering a keyword into the search box above. Then click the "Search Within" checkbox, then click on the orange "Search" button.
If you did not find what you are looking for or you did not get any results, try changing your search term(s). See our Search Help page for more tips.
Date: 1900 ca.
Description: View of the Krueger family standing in a cleared field, with a view of their farm in the background. August Krueger is sitting with a dog in a wagon pulled...
Date: 1987-09
Description: Laura Rivera celebrates Appreciation Day with an ear of corn.
Date: 1954 ca.
Description: A young girl stands in the foreground holding a puppy in her arms. Behind her bordering the yard are trees and buildings.
Date: 1987 ca.
Description: Open house at the Gordon Berg farm where the Bergs show off their Holsteins.
Date: 1924 ca.
Description: Mary Brandel poses on a weathered log, with fields, fence, and buildings in the background.
Date: 1920 ca.
Description: Two Chevrolets parked together. In the background are trees and a barn.
Date: 1988-06
Description: At Theresa Station, Shirley Widmer and Kake Koll inspect a Wisconsin Central railroad cart, which had been restored by railroad buff Dean Kedinger. The sta...
Date: 1962
Description: "Mayville High School graduates assemble at Mayville Firemen's Park."
Date: 1999-09-24
Description: "On this Friday we choose to go to Mark's Get-A-Way in beautiful Theresa." From left to right; Ralph "Buddy" Ruecker, Rudy Heinecke, John Bodden, Ralph Wid...
Date: 1955 ca.
Description: Robert Krueger posing in a field next to a drag bucket filled with dirt attached to a crawler crane. Edgar Krueger sits behind him in the cab of the crane....
Date: 1988-04
Description: Firemen Joel Graff, Craig Hahn and Max Zastrow pose in front of the firehouse.
Date: 1901-02
Description: Outdoor winter group portrait of Herman Reibe and his four sisters. Herman is seated on a log that has been fashioned into a chair while his four sisters...
Date: 1905 ca.
Description: Elevated view of the south section of town as seen from a water tower.
Date: 1993-03-30
Description: "Pallbearers and honorary pallbearers carry Dr. Greg Langenfeld's casket from St. Theresa Catholic Church."
Date: 1983-05
Description: "The Berg Family: Pastor John, his wife, Beth, and daughters, Sarah and Rachel."
Description: Right side view of crawler crane with a drag bucket filled with dirt working in a field.
Description: Glenn Oestrich standing between his grandparents, Edgar and Elna Krueger, holding their hands. In the background is the barn on the Krueger farm.
Date: 1995-11
Description: "Theresa's new Cwik Mart."
Description: Jim and Shirley Widmer practice how they will take the church council photo.
Date: 1932-05
Description: Alexander Krueger carrying Shirley Krueger in a hand woven basket supported by a neck yoke. A barn stands in the background.
If you didn't find the material you searched for, our Library Reference Staff can help.
Call our reference desk at 608-264-6535 or email us at:
© 1996-2015 Wisconsin Historical Society, 816 State Street, Madison, WI 53706


text:
- Home
- My NYPL
My Borrowing
My Shelves
My Community
- Explore
New & Notable
Made at NYPL
- Research
Electronic Resources
Tools and Services
- Using the Library
Get Oriented
I am a...
- Locations
- Classes & Events
- Support the Library
- Help
About the Castle Hill Library
The Castle Hill Branch of The New York Public Library is a modern, spacious brick building located on Castle Hill Avenue near the corner of Bruckner Boulevard.
Established in 1961, the branch was previously located on Cincinnatus Avenue. The one-story facility that opened in July 1981 features adult, young adult, and children's collections. A multipurpose room is available for community group meetings as well as library programs.
Search for events at this branch.
Community District Information
For more information about your Community District, including census data, community board information, local schools, and other resources, see here.


text:
Possible Answer
The all new revamped VIT University Website. Compatible for all form factors, including Mobile Phones, Desktops, Laptops and Tablets. - read more
VITEEE 2015 Fee Structure- Know the annual and one time VITEEE 2015 fees to be paid for the B.Tech admissions at VIT University. - read more
Please vote if the answer you were given helped you or not, thats the best way to improve our algorithm. You can also submit an answer or search documents about fees structure of vit.